Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
File: RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json)
Hash identifier: 47lIB948b+ZcF2Tz+asj2NP7YCfAVGC/wFZWTjV/v6o=
Subject key identifier: 83:04:2A:D4:50:01:54:F4:F1:89:9D:9A:81:1E:09:86:7A:E3:B7:4B
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial: 0196A1D28B506E41C0517EBA059765E89A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
Manifest number: 0382
Signing time: Mon 05 May 2025 19:00:52 +0000
Manifest this update: Mon 05 May 2025 19:00:52 +0000
Manifest next update: Tue 06 May 2025 19:00:52 +0000
Files and hashes: 1: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: o3flgDNJoAtRqzgW5QhdfNuqdpcATOAdf4lgM1qNGq4=)
2: knBsZ4wjpF8zeO3oZHgDCU3JzpY.roa (hash: TYTzhZiCS0TYNybiAGDqTJecyl1aRzohizYpYrTciOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:8b:50:6e:41:c0:51:7e:ba:05:97:65:e8:9a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Validity
Not Before: May 5 19:00:52 2025 GMT
Not After : May 6 19:00:52 2025 GMT
Subject: CN=83042ad4500154f4f1899d9a811e09867ae3b74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:3e:ed:8f:87:b5:06:fd:7e:f7:0f:15:43:
74:75:2d:08:19:5b:ad:61:fd:a1:4f:9b:2f:94:94:
03:76:04:bc:23:cd:00:54:02:dc:a2:b7:bb:88:ca:
d5:c7:1d:67:9c:52:4a:b4:d9:af:2f:32:9a:95:78:
b1:5d:a1:50:d2:b5:86:97:a0:ea:95:ff:42:08:67:
34:31:35:f6:7f:06:01:10:b0:b4:0a:aa:5b:ed:d7:
f6:1d:d8:c8:c5:b8:ac:4a:70:0d:c9:db:83:92:38:
21:f4:4d:94:29:db:6b:fd:6e:bc:ef:8f:f1:79:52:
2b:cf:1c:60:51:d2:94:0e:ff:45:b9:be:52:0a:9f:
89:20:b4:6c:e8:02:3f:0e:6a:9a:2f:19:9d:7e:64:
e9:26:04:cf:d5:50:1c:63:18:eb:97:9e:16:9f:4e:
6c:e0:96:78:a1:a4:4e:a5:15:e4:11:b4:2b:21:a6:
80:d7:da:79:a9:97:e6:83:9d:d8:43:7f:c6:65:1e:
26:f1:76:0c:b9:a9:02:02:a9:de:e2:e0:91:90:38:
bd:7b:12:41:73:5c:70:16:69:12:7f:a2:81:fd:3a:
bb:5d:2c:f0:01:80:1b:2a:1f:a0:a6:c8:ac:73:14:
18:0e:de:30:38:23:4f:4c:59:c1:cc:9a:dc:9d:b8:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:2A:D4:50:01:54:F4:F1:89:9D:9A:81:1E:09:86:7A:E3:B7:4B
X509v3 Authority Key Identifier:
keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:29:87:bb:46:2c:5e:d1:23:46:b8:06:05:73:0c:c0:eb:12:
b0:21:a3:76:ef:3c:ae:ec:a4:79:f5:7d:c8:bc:37:02:27:ed:
eb:a2:71:54:7c:74:bc:f9:c0:3c:32:ad:23:ef:8d:5b:92:29:
45:02:f7:20:9a:e3:0b:88:d6:38:72:dc:04:12:6d:64:ea:8f:
7d:ce:2e:59:17:bb:ff:22:35:cd:11:aa:ae:47:21:2f:d8:92:
53:81:86:04:74:97:cd:ed:c5:13:6d:29:22:b8:d0:2d:38:90:
b0:3d:d0:7f:01:2e:1f:f3:51:03:87:31:f3:ef:63:ac:f8:f9:
bd:ec:29:93:3d:8b:9c:0b:37:ac:ed:2a:89:b7:1a:90:f2:dd:
32:d0:bf:02:4f:1b:77:2f:80:f5:e1:d7:46:2b:b3:76:d7:06:
80:c3:35:83:9f:af:85:75:c4:d7:d5:7d:6f:e0:98:c5:aa:f3:
d3:e4:1b:e0:80:b3:50:08:5b:dd:32:e9:26:71:44:7c:fe:2f:
4b:9e:85:85:6e:61:b7:b6:b8:1c:5c:20:bd:60:61:e4:f9:81:
ec:df:1d:ac:c8:2b:19:05:44:72:ec:50:2a:0c:2c:44:af:83:
cd:d2:34:7f:2e:86:e1:8a:e3:21:16:39:dd:67:ce:91:54:d8:
cd:fa:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:33:26 2025 by rpki-client